Security FAQs

What are your web security practices?

Your security is one of our highest priorities at Desert Financial. We use state-of-the-art software and other technologies to prevent unauthorized users from accessing our systems. Some of the measures we take are very apparent – including the encryption of sensitive data and password protection – while other precautions are equally effective, but less obvious. View our browser requirements here.

Here are some of our practices that help ensure the confidentiality of your transactions:

Browser requirements

We support most modern browsers (Microsoft Edge, Chrome, Firefox, etc.).

Browser encryption

We require 128-bit secure, JavaScript and cookie-enabled browsers to log in and use Online Banking. Supported browsers are noted on our browser requirements page, accessible above.

Extended validation

Secure sockets layer (SSL) certificates are used to both authenticate the identity of a website and encrypt communications between the user and the website. Desert Financial chose Verisign’s Extended Validation (EV) SSL, the highest standard for website authentication, because we take your online security very seriously. In high-security browsers, an EV SSL certificate triggers the browser address bar to turn green, display “https://” and show our name as the owner of the website.

Username and password

To access your account information, you are required to enter a valid username and password for Online Banking. You’ll notice that we do not display the characters of your password as you enter them, to provide an extra level of visual security. Data is also encrypted through a secure server connection, using SSL technology.

For your security, you should never save your passwords when prompted by your browser. This is especially important if you are accessing your account from a public computer. Also, never share your password with anyone or write it down where someone might find it. We recommend that you change your password often and do not use common words that can be found in the dictionary, your first or last name or numbers in a series.

Please ensure that you use your logout feature if you will be leaving your computer for any amount of time. Logging out will ensure your session has ended, and a username and password will be required to re-enter the Online Banking system. We recommend that you close your browser after you have logged out. This will provide one more level of security to ensure no one is able to enter your previous session.

Desert Financial will never send unsolicited emails or make unsolicited phone calls or texts asking you to give or verify personal information online, including your username, password or PIN. You should never respond to any email or text message that states that your account has been compromised and/or that asks you to confirm your account or any personal information.

Multi-factor authentication

Desert Financial confirms your identity via at least two unique elements: ATM transactions that require a separate card and PIN, and Online Banking, which requires a short code verification sent to your phone or email or multi-factor authentication apps like Duo or Google Authenticator.

Network security and monitoring

Firewalls are used to protect our systems and networks from any unauthorized internet traffic. The firewall’s purpose is to ensure that only authorized traffic is allowed to pass through our systems and networks. As this is done, logs of network traffic are created, which allow us to do centralized auditing and security monitoring. The security of financial transactions is an ongoing process at Desert Financial, so we employ around-the-clock monitoring of our systems and networks.

Mobile banking security

Your security is one of our highest priorities at Desert Financial. We use state-of-the-art software and other technologies to prevent unauthorized users from accessing your accounts.

App banking uses encryption to keep your information secure and confidential. It does not store any confidential information on your mobile device.

Mobile web banking ensures all the information sent and received is encrypted, just like when you do Online Banking at home.

Text banking does not send any confidential security information about you or your accounts, either to or from your mobile device. Like ATM receipts, full account numbers are never displayed. You are required to use account nicknames that don’t include any digits from your account numbers.

What can I do to protect myself?

To increase your mobile banking security:

Use a passcode on your mobile device.
Never share your private information (password, PIN, etc.) with anyone.
Don’t save private information on your mobile device.
Immediately report the loss or theft of your mobile device to both Desert Financial and your carrier.
Add Desert Financial’s short code, 99321, to your phone’s contact list with a distinctive name, so you will know incoming messages are from Desert Financial, not someone imitating Desert Financial.
Use account nicknames, not account numbers.
Do not include any digits from your account numbers in nicknames.
Sign up for alerts, allowing you to have important information about the status of your account sent directly to your phone.
Enable multi-factor authentication